new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

data_protection

8 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Mobile internal storage for private data

Store private data on the device's internal storage rather than external storage in mobile applications.

Android sensitive data storage avoidance

Avoid storing sensitive data in Android SharedPreferences. See the Android documentation on working with data securely for secure data storage approaches.

Android backup mode disabling

Disable Android backup mode to prevent sensitive data from being stored in backups.

iOS WidgetKit lock screen sensitive data protection

Widgets on the lock screen may display sensitive data when unlocked status is not verified. For iOS/iPadOS versions 17 and higher, use `WidgetInfo.isLocked` to detect lock screen state. For earlier iOS versions, implement custom logic based on available widget states since `widgetFamily` alone does not directly provide lock screen information. Apply conditional logic to mask or restrict sensitive widget content when appropriate security conditions are not met.

iOS background refresh policy for locked device

Configure appropriate background refresh policies to prevent sensitive data updates while the device is locked.

iOS plist sensitive data storage prohibition

Do not store sensitive data in plist files on iOS applications.

Mobile local data encryption with user credentials

If storing data locally on mobile devices, encrypt it using a key derived from the user's login credentials.

Mobile data leakage through caching and logging prevention

Beware of caching, logging, and background snapshots in mobile applications. Ensure that sensitive data is not leaked through these mechanisms. Refer to the Logging Cheat Sheet for examples of data that should not be logged.

Give your agent this brain